CVE-2024-42384

Name of the Vulnerable Software and Affected Versions Cesanta Mongoose Web Server version 7.14

Description The issue is related to an Integer Overflow or Wraparound vulnerability. It allows an attacker to send an unexpected TLS packet, which can produce a segmentation fault on the application.

Recommendations For Cesanta Mongoose Web Server version 7.14, consider disabling the TLS functionality until a patch is available to prevent exploitation of the Integer Overflow or Wraparound vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.